Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
File: Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer (raw, json)
Hash identifier: pdM6TIdm4LOusXjpC71oKxqoI5HGoKTF1n9byT26+hQ=
Subject key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC26D63A27FA74DB61F458BACDC6DD2CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 00:29:58 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 201598
IP: 185.69.172.0/22
IP: 2a03:30e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:63:a2:7f:a7:4d:b6:1f:45:8b:ac:dc:6d:d2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:0d:36:62:08:d1:6d:ff:48:63:36:bf:e5:
d2:5a:ea:cd:4d:0f:8d:88:0d:57:97:3b:53:c7:0d:
98:b5:bc:1b:55:e6:b4:cc:3b:cb:b0:b5:55:fd:38:
c1:2f:60:d0:01:6a:d2:78:8a:b9:8a:15:13:56:39:
a6:db:2c:a9:60:37:4a:76:4e:54:32:27:65:25:cd:
15:74:b3:60:df:8a:19:63:2e:73:17:cf:78:dc:14:
07:65:b5:42:6e:37:c0:af:40:be:0c:57:4c:27:f9:
05:21:d3:80:7e:0f:f3:a0:0f:d8:af:c7:85:9c:d8:
2c:cc:7d:a9:4f:5d:9a:0c:da:9c:36:98:18:0c:79:
e4:76:38:37:33:dd:96:40:a5:3f:cf:7c:26:28:e9:
2a:e8:c1:a8:cd:0f:50:fb:fd:11:e1:ba:a6:7d:cf:
e0:ee:3e:c4:eb:78:8a:29:d6:de:cf:62:df:36:b4:
32:17:a6:98:45:b4:ed:cf:0c:25:17:d2:29:1f:bd:
26:4c:9e:2f:69:9b:55:e8:57:e6:1e:27:42:94:4c:
87:f0:4c:33:8c:e3:9a:03:2c:b9:91:e7:2e:28:60:
b2:21:e3:0f:7c:f0:08:3e:db:39:20:55:8c:4b:aa:
11:ab:38:ba:6a:cf:55:a6:ac:08:03:52:c1:04:0d:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.172.0/22
IPv6:
2a03:30e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201598
Signature Algorithm: sha256WithRSAEncryption
06:af:69:4e:6e:bb:7a:fa:f1:38:f7:ac:80:af:69:76:69:7d:
38:df:13:33:29:5b:23:2e:2b:19:64:a0:88:45:48:b0:0d:27:
8f:a1:1c:64:03:b3:3b:69:ba:46:8d:a6:b4:b1:d5:dd:d6:c9:
04:5f:98:28:b6:52:3f:f5:dc:b4:09:f9:89:0a:e5:54:18:8d:
36:75:92:f4:11:78:ab:e1:6d:75:6b:f1:77:ef:49:6d:44:e8:
b1:9e:ad:77:a0:aa:fa:d1:83:7e:16:a8:e5:ea:13:c2:9a:ba:
d8:73:7e:ea:51:03:28:63:0a:52:da:1a:cf:61:d3:06:c6:47:
37:1e:04:6b:b1:72:c4:e6:57:14:13:fa:57:f9:14:82:36:4c:
37:09:2f:ac:20:24:25:f6:0a:24:2f:3c:c5:e9:88:5c:e1:3e:
86:2a:c1:00:d5:77:e4:2c:25:62:2d:c2:3a:18:69:9c:6e:91:
aa:96:e2:96:f1:8b:49:10:fc:05:51:ee:e1:b7:c8:85:b5:19:
e4:47:a6:87:9c:f1:0f:0b:a2:3e:fc:fb:c5:d5:5c:33:2a:cc:
33:32:ff:82:ac:7a:93:5d:94:73:df:a4:fb:f6:10:ae:eb:f6:
f6:64:25:97:73:be:e2:c2:d6:7a:7c:92:f5:ce:5a:49:57:20:
1c:5f:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:03:52 2024 by rpki-client on console-ams.rpki-client.org